The vulnerability of the setSyslogCfg() function (/cgi-bin/cstecgi.cgi) in the TOTOLINK X5000R router’s microprogramming software allows a intruder to execute any command they desire.

The vulnerability of the setSyslogCfg function /cgi-bin/cstecgi.cgi in the TOTOLINK X5000R router’s microprogramming software exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a remote attacke...

The vulnerability of Reposilite repository management software lies in the improper limitation of the path to the restricted access catalog, allowing attackers to execute arbitrary code.

The vulnerability of the Reposilite repository management software is related to incorrect restrictions on the path to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created package...

GLSA-202405-10 : Setuptools: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202405-10 Setuptools: Denial of Service - Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular...

The vulnerability of the PAN-OS operating system, related to the unlimited distribution of resources, allows a perpetrator to trigger a service failure.

The vulnerability of the PAN-OS operating system is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created package...

BIT-SETUPTOOLS-2022-40897

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

CVE-2023-46454

In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

CVE-2023-46454

In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

CVE-2023-4996

Netskope was made aware of a security vulnerability in its NSClient product for version 100 & prior where a malicious non-admin user can disable the Netskope client by using a specially-crafted package. The root cause of the problem was a user control code when called by a Windows ServiceControll...

PT-2023-31425 · Netskope · Netskope Client

Name of the Vulnerable Software and Affected Versions: Netskope NSClient versions 100 and prior Description: A security issue was discovered in the NSClient product where a malicious non-admin user can disable the Netskope client using a specially-crafted package. The root cause is a user control...

CVE-2023-41355

Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted package to modify the network routing table, resulting in a denial of service or sensitive...

CVE-2023-41902

An XPC misconfiguration vulnerability in CoreCode MacUpdater before 2.3.8, and 3.x before 3.1.2, allows attackers to escalate privileges by crafting malicious .pkg files...

CoreCode MacUpdater Code Issue Vulnerability

CoreCode MacUpdater is a program from CoreCode that scans your Mac and shows you which of your installed applications are not up-to-date. A security vulnerability exists in CoreCode MacUpdater versions prior to 2.3.8 and versions 3.x through 3.1.2. An attacker exploited the vulnerability to eleva...

CVE-2023-20017

Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote attacker to execute arbitrary commands using root-level privileges. The attacker would need to have Administrator privileges on the affected device to exploit these vulnerabilities. These...

PT-2023-4522 · Cisco · Cisco Intersight Private Virtual Appliance

Name of the Vulnerable Software and Affected Versions: Cisco Intersight Private Virtual Appliance affected versions not specified Description: The issue is due to insufficient input validation when extracting uploaded software packages, allowing an authenticated, remote attacker with Administrato...

Amazon Linux 2 : python-setuptools (ALAS-2023-2196)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2196 advisory. Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denia...

PYSEC-2023-99

A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server...

PYSEC-2023-99

A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server...

PT-2023-23380 · Pypi · Pipreqs

Name of the Vulnerable Software and Affected Versions: pipreqs versions 0.3.0 through 0.4.11 Description: A dependency confusion in pipreqs allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server. Recommendations: For pipreqs versions 0.3.0...

EulerOS Virtualization 3.0.6.0 : python-setuptools (EulerOS-SA-2023-2246)

According to the versions of the python-setuptools packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML...

Huawei EulerOS: Security Advisory for python-setuptools (EulerOS-SA-2023-2246)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...